This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft File: jghAgExmgMQfIehybzgLleaelEc.mft (raw, json) Hash identifier: etZKhVqh1W1hCYqWwDzEknycBo1Knsdm7/sWPehopQU= Subject key identifier: F3:F2:03:EA:06:7A:48:F0:26:73:0F:F5:0C:C3:97:95:39:D6:56:DF Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47 Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447 Certificate serial: 019B5F414FFD684A1C6D21EC8ACE4C28BB5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft Manifest number: 0CEA Signing time: Sat 27 Dec 2025 10:01:14 +0000 Manifest this update: Sat 27 Dec 2025 10:01:14 +0000 Manifest next update: Sun 28 Dec 2025 10:01:14 +0000 Files and hashes: 1: B_tPzlcakKiFDBacnORzzWv1yTE.roa (hash: agYbT4sj3xKKoiRvTRiMrXGnEy5N2ggal8elxJ61JUw=) 2: HtP1TmS7Jnp-rdYE-25kUdcbSF8.roa (hash: E94twRw9JlGZMbmmCttmzyXZguvpf/OPgy8FVeGF2rg=) 3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: tKRfLVhdolWIrDJ6TQTznODYH7FIrjnnTO6Jf9tqnig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:41:4f:fd:68:4a:1c:6d:21:ec:8a:ce:4c:28:bb:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447 Validity Not Before: Dec 27 10:01:14 2025 GMT Not After : Dec 28 10:01:14 2025 GMT Subject: CN=f3f203ea067a48f026730ff50cc3979539d656df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c8:8c:31:0d:9a:2a:85:4a:3c:17:aa:f9:35: 0a:04:03:d6:c3:ed:71:ee:16:df:7c:9c:16:85:4e: ee:74:3c:5c:8a:9a:4d:6d:5d:35:62:cb:76:a7:c2: c4:95:b0:21:92:65:71:f8:a2:2d:32:03:4a:ce:5a: eb:c0:b6:22:eb:c9:e7:20:21:c7:66:38:f2:cf:1c: 94:2f:5c:b4:5f:4f:7e:7c:a9:86:2d:b2:7c:de:ef: ba:27:16:b7:6f:b5:8e:ae:bd:a8:3e:ce:e5:17:58: 8d:f0:5c:91:70:ed:4f:c0:4a:bb:15:f0:33:f9:04: f0:9d:e3:ab:e5:a6:9e:57:38:cb:c8:d8:b2:cd:be: 5d:e6:0e:b3:da:34:19:c2:37:8d:f4:c4:32:87:87: 92:d1:51:49:ce:50:ca:e1:f6:81:87:56:bd:bf:5e: a1:3b:5e:94:ae:3d:da:85:16:9c:87:16:8e:78:ec: 78:1e:76:0f:ef:28:10:ed:34:f0:fc:98:1c:58:f1: 8f:86:fb:6d:ac:f1:65:77:48:49:50:9a:03:88:8b: db:c7:e9:83:25:25:b8:8e:68:9a:0e:5f:38:c3:c2: 0d:43:87:38:fc:cd:ec:8b:68:da:3b:8c:d5:3d:81: 21:bc:ab:8e:aa:3d:90:35:b8:98:64:3c:fe:55:ae: 25:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F2:03:EA:06:7A:48:F0:26:73:0F:F5:0C:C3:97:95:39:D6:56:DF X509v3 Authority Key Identifier: keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:93:c6:f3:51:95:41:ce:03:fd:e0:4c:e8:ef:59:d9:d6:f9: 04:2b:89:a2:e7:85:ae:a2:0c:5b:de:d5:93:4a:fb:10:05:ab: 96:40:e8:1a:ad:1d:a6:08:51:ec:3a:0a:ce:d2:33:08:8c:06: a4:76:a1:54:ff:78:6c:91:cd:94:b2:97:99:fa:36:b3:62:53: 3f:8f:dd:fc:34:30:31:46:02:69:b7:b2:a4:17:bd:da:bd:71: 83:68:22:a6:82:20:dc:91:9f:b0:25:e6:ef:7d:30:55:e6:22: 4d:81:5d:ac:1b:9d:fe:c8:dd:37:e5:58:db:2d:ca:03:1b:5f: c9:64:1e:ac:0d:3a:4d:4c:e0:0b:2c:42:6e:c4:38:77:dc:cd: 2b:2e:e2:47:d5:26:52:f4:32:30:a2:b4:1b:87:01:fb:66:88: 76:b7:65:2f:63:00:ac:6a:ef:72:b8:95:44:75:ec:cb:11:9f: 22:5d:d5:df:c3:c9:dd:4e:66:d4:b0:dd:35:91:4c:86:5a:00: 8b:63:a0:98:ab:03:b9:54:ef:a5:68:d9:cd:67:47:24:fc:0a: 5d:3d:a7:9b:eb:22:86:4f:97:8a:b8:6b:1e:8b:1c:f2:1b:03: 4f:91:ee:00:f3:92:7c:c8:53:17:70:c2:70:f1:73:86:38:9a: ef:d0:aa:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQU/9aEocbSHsis5MKLtfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMDg0MDgwNGM2NjgwYzQxZjIxZTg3MjZmMzgwYjk1ZTY5 ZTk0NDcwHhcNMjUxMjI3MTAwMTE0WhcNMjUxMjI4MTAwMTE0WjAzMTEwLwYDVQQD EyhmM2YyMDNlYTA2N2E0OGYwMjY3MzBmZjUwY2MzOTc5NTM5ZDY1NmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0siMMQ2aKoVKPBeq+TUKBAPWw+1x 7hbffJwWhU7udDxcippNbV01Yst2p8LElbAhkmVx+KItMgNKzlrrwLYi68nnICHH ZjjyzxyUL1y0X09+fKmGLbJ83u+6Jxa3b7WOrr2oPs7lF1iN8FyRcO1PwEq7FfAz +QTwneOr5aaeVzjLyNiyzb5d5g6z2jQZwjeN9MQyh4eS0VFJzlDK4faBh1a9v16h O16Urj3ahRachxaOeOx4HnYP7ygQ7TTw/JgcWPGPhvttrPFld0hJUJoDiIvbx+mD JSW4jmiaDl84w8INQ4c4/M3si2jaO4zVPYEhvKuOqj2QNbiYZDz+Va4lkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPyA+oGekjwJnMP9QzDl5U51lbfMB8GA1UdIwQY MBaAFI4IQIBMZoDEHyHocm84C5XmnpRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jZWU1NzItMzQyMC00NWU0LTg3YjYt YzI3OTk3NTNjODUzLzEvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9jZWU1NzItMzQyMC00NWU0LTg3YjYtYzI3OTk3NTNjODUz LzEvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepPG81GV Qc4D/eBM6O9Z2db5BCuJoueFrqIMW97Vk0r7EAWrlkDoGq0dpghR7DoKztIzCIwG pHahVP94bJHNlLKXmfo2s2JTP4/d/DQwMUYCabeypBe92r1xg2gipoIg3JGfsCXm 730wVeYiTYFdrBud/sjdN+VY2y3KAxtfyWQerA06TUzgCyxCbsQ4d9zNKy7iR9Um UvQyMKK0G4cB+2aIdrdlL2MArGrvcriVRHXsyxGfIl3V38PJ3U5m1LDdNZFMhloA i2OgmKsDuVTvpWjZzWdHJPwKXT2nm+sihk+XirhrHosc8hsDT5HuAPOSfMhTF3DC cPFzhjia79Cqag== -----END CERTIFICATE-----Generated at Sat Dec 27 15:57:16 2025 by rpki-client